Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: uFiIHJzL/zM8lgH/Z9Kdc5ZQG7ihJbfVQ4WHDi3uwvI=
Subject key identifier: F7:7D:53:B1:86:16:09:BA:1A:5B:BD:54:F8:CE:48:C5:54:A9:52:22
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 019A21769598CD1F83C4F02E00BD3FCB0A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 05C2
Signing time: Sun 26 Oct 2025 17:00:10 +0000
Manifest this update: Sun 26 Oct 2025 17:00:10 +0000
Manifest next update: Mon 27 Oct 2025 17:00:10 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: S5ouW9YlSooismgWipdFCJghuS5GX19IriNmM4ODXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:95:98:cd:1f:83:c4:f0:2e:00:bd:3f:cb:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Oct 26 17:00:10 2025 GMT
Not After : Oct 27 17:00:10 2025 GMT
Subject: CN=f77d53b1861609ba1a5bbd54f8ce48c554a95222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:cc:66:27:71:4a:a6:96:80:2e:dc:d5:15:
e9:31:6b:78:54:17:69:b3:da:ed:2a:7a:47:5a:ed:
c2:bb:20:b4:16:6b:1e:f6:6c:bb:6b:ee:ba:8a:d1:
7f:83:de:0f:c6:59:cd:34:4a:69:27:05:f2:e5:4f:
8b:62:81:1f:5b:0d:f3:36:04:17:05:4f:de:0e:e3:
4b:a2:d4:32:50:06:de:52:51:a0:cb:a0:e2:98:af:
2e:d3:ec:9b:88:82:c5:db:d0:a9:a1:5b:3b:14:f8:
df:9a:34:3a:f6:6e:98:3c:a3:2e:5c:a9:35:1d:cb:
94:01:c7:ba:c1:2a:82:32:67:7f:1e:60:ff:4f:fe:
5b:73:c6:cb:83:97:aa:95:3c:d0:0f:24:ad:f3:76:
ae:92:40:8e:99:17:cb:92:61:aa:12:43:42:bb:8f:
3e:e7:dc:8d:2b:85:47:32:43:e1:23:cc:31:ce:30:
d5:46:ad:b3:bd:1a:b4:4a:82:56:85:64:c2:a2:d5:
95:ff:be:14:dc:9c:a5:6a:e8:1b:d5:37:21:e2:45:
54:5a:5e:23:e0:b8:8d:f9:cd:ce:9d:0f:d5:37:7f:
91:95:41:68:cd:3f:56:fa:08:2e:6f:5e:3f:c2:85:
3e:77:ec:ab:dd:6a:32:f3:04:88:b5:14:e5:00:5a:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7D:53:B1:86:16:09:BA:1A:5B:BD:54:F8:CE:48:C5:54:A9:52:22
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:81:ef:cd:36:c6:82:11:4f:b3:da:58:e0:7f:9a:2d:be:52:
4a:9e:f8:76:12:7d:c3:7b:fd:aa:97:56:6c:0e:05:f2:5c:f3:
2a:1e:99:4e:35:5a:55:6b:35:31:80:40:da:f9:47:ae:8c:9a:
76:82:3f:39:a7:5a:28:47:fe:5a:71:07:43:e9:37:12:59:33:
17:4d:30:0c:69:47:46:b9:24:e2:48:d3:7d:de:57:26:b6:34:
ae:45:e9:91:d1:4d:b8:1c:db:fc:7d:c2:f1:62:5a:64:ef:60:
e9:6a:31:bc:10:b1:6e:53:7a:ab:a7:c8:97:fd:d5:8d:cd:c0:
73:8b:2a:e4:c4:37:3e:46:db:be:e1:db:4c:b4:a4:d0:2f:02:
65:e5:ef:f3:f1:f3:c5:ee:e0:b7:60:6e:13:76:55:19:eb:e9:
3e:d5:97:fe:6a:1f:32:8b:33:1e:36:70:f2:74:04:9c:a4:d5:
2a:50:47:85:3b:51:27:14:bf:43:15:d0:25:28:d4:a0:c7:a5:
93:a1:2c:2d:44:a2:11:39:c1:37:a0:ff:9a:54:aa:26:30:11:
d5:8f:1c:ce:d7:fa:7c:f5:74:8a:e9:62:a2:f2:10:3a:8f:79:
99:78:7c:5e:24:ea:1f:6d:da:f7:14:c6:cf:e3:a1:32:2c:b0:
c6:59:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:41:43 2025 by rpki-client